What does unep.org track?
Before any consent, unep.org loaded 10 tracking companies and set 19 advertising or analytics cookies.
That's more tracking companies than 92% of the 2,450 sites we scanned.
Scanned October 2, 2026 from Germany, loading www.unep.org once and clicking nothing. How we scan
- Tracking companies
- 10
- Tracking cookies
- 19
- Third-party hosts
- 34
- Cookies in total
- 26
Consent banner
No known consent management platform was detected on the page.
Companies contacted before consent
4 of the 15 companies it contacted before consent were social media companies.
- Google Ads6 requestsAdvertising
stats.g.doubleclick.net, www.google.de, ad.doubleclick.net
- Microsoft Advertising4 requestsAdvertising
bat.bing.com, bat.bing.net
- Meta9 requestsSocial media
connect.facebook.net, www.facebook.com, platform.instagram.com, www.instagram.com
- TikTok7 requestsSocial media
analytics.tiktok.com, analytics-ipv6.tiktokw.us
- X (Twitter)6 requestsSocial media
platform.twitter.com, static.ads-twitter.com, syndication.twitter.com, t.co
- LinkedIn4 requestsSocial media
snap.licdn.com, px.ads.linkedin.com
- Google Analytics11 requestsAnalytics
region1.analytics.google.com, www.googletagmanager.com, www.google-analytics.com, region1.google-analytics.com
- Crazy Egg4 requestsAnalytics
script.crazyegg.com
- Contentsquare3 requestsAnalytics
t.contentsquare.net
- Mouseflow1 requestAnalytics
cdn.mouseflow.com
Other third parties (content delivery, consent, functional, unclassified)
- unenvironment.org11 requestsUnclassified
cdn.unenvironment.org
- flickr.com3 requestsUnclassified
embedr.flickr.com, widgets.flickr.com
- Google7 requestsFunctional
fonts.googleapis.com, www.google.com, fonts.gstatic.com, www.googleoptimize.com
- Cloudflare9 requestsContent delivery
cdnjs.cloudflare.com
- Font Awesome2 requestsContent delivery
use.fontawesome.com
Cookies set before consent
The longest-lived tracking cookie it set was muc_ads, from X (Twitter), lasting about 13 months.
| Cookie | Purpose | Set by | Lasts |
|---|---|---|---|
| _fbp | Advertising | unep.org | 3 months |
| _gcl_au | Advertising | unep.org | 3 months |
| _tt_enable_cookie | Advertising | unep.org | 13 months |
| _ttp | Advertising | tiktok.com (third party) | 13 months |
| _ttp | Advertising | unep.org | 13 months |
| bcookie | Advertising | linkedin.com (third party) | 12 months |
| lidc | Advertising | linkedin.com (third party) | 1 day |
| muc_ads | Advertising | t.co (third party) | 13 months |
| personalization_id | Advertising | twitter.com (third party) | 13 months |
| ttcsid | Advertising | unep.org | 13 months |
| ttcsid_D9TIKR3C77UD9334HQE0 | Advertising | unep.org | 13 months |
| _ce.s | Analytics | unep.org | 12 months |
| _dc_gtm_UA-59519586-1 | Analytics | unep.org | Under a day |
| _ga | Analytics | unep.org | 13 months |
| _ga_1DQHHGHPWR | Analytics | unep.org | 13 months |
| _ga_CMH16JZ1F1 | Analytics | unep.org | 13 months |
| _ga_P8SM9FN2WZ | Analytics | unep.org | 13 months |
| _gat_UA-59519586-1 | Analytics | unep.org | Under a day |
| _gid | Analytics | unep.org | 1 day |
| _twpid | Unclassified | unep.org | 13 months |
| _twsid | Unclassified | unep.org | 13 months |
| __cf_bm | Functional | twitter.com (third party) | Under a day |
| __cf_bm | Functional | t.co (third party) | Under a day |
| __cf_bm | Functional | linkedin.com (third party) | Under a day |
| cf_clearance | Functional | unep.org | 12 months |
| li_gc | Functional | linkedin.com (third party) | 6 months |
The page also wrote 3 keys to local storage, which works like a cookie but isn't sent with requests.
Understanding this page
- How to see which cookies and trackers a website loads
A hands-on walkthrough for checking what a site sets before you've clicked anything, using Chrome and Firefox's built-in tools, plus how CookieTosser automates the same check every month.
- What counts as valid cookie consent in the EU
The rules that actually govern cookie banners — the ePrivacy Directive, the GDPR consent standard, the Planet49 ruling, the strictly-necessary exemption, and what "reject" has to offer compared with "accept.
- Consent management platforms explained
What a CMP banner is actually doing behind the scenes, how the IAB's TCF standard and Google's Consent Mode v2 fit in, and why a banner being present is no guarantee that nothing loads before you answer it.